A complete Digital Complaints Management System (DCMS) for professional football Clubs.
Written by an in house Data Protection Officer (DPO) that has over ten years of experience dealing with the wide and varied range of complaints, that professional football clubs receive. Using this knowledge and experience, the DCMS has been designed to be utilised across all aspects of a Club’s business. Data compliance, Retail, Ticketing, HR, Operations and Commercial matters, can all be managed centrally, within the DCMS system.
The recently (19th June 2026) enacted provisions of the Data (Use and Access) Bill, 2025, makes it mandatory, to have a digital process, for the submission, review and management of complaints relating to data. The DCMS can be used very simply to enable full compliance with the new Act, for those Clubs that have a DPO, and equally for those that do not.





Compliance Close Season Sale
With the compliance date of the 19th of July 2026 having passed, it is understood how important it is for a system to be put in place, to allow compliance. Clubs that sign up before the start of the 2026/2027 season on a three-year contract get their first-year fee reduced, plus a complimentary two-hour training session.
Get further information
Here are a number of the features of the system that will allow for compliance and management across a Club.
Simple, instant compliance.








Central Case Management
One of the major problems facing complaints management, is the disparate nature of football organisations. Departments may be in alternative locations, even in different towns. Further, there may not be much interaction between Departments, with email being the only common form of communication.
This is often the case, even with all Departments in the same location. The DCMS provides a centralised resource, that receives, sends and stores all relevant emails, documents, investigations etc., and makes them available to all parties.








Automated Time Management
Where a complaint is time sensitive, for example in a Subject Access Request (SAR), or a Data Breach, the system will send warning messages to designated staff, at pre-determined intervals, to ensure that deadlines are complied with.
For example, in relation to a SAR, at 7, 14, 21, 28 and 30 days. This makes it almost impossible not to comply with the legislative deadlines, enabling the avoidance of crippling fines for non-compliance. The DCMS automatically notifies at least two staff of the arrival of a complaint, to ensure that nothing is missed.


Secure Public Entry Portal
Complaints are submitted through a dedicated entry page, linked to from a Club’s existing website and privacy documents, with email verification before a case is created.
This ensures that every complaint enters the system cleanly and securely, removing the risk of items being lost in personal inboxes. Correspondents are guided through an entry form, which gives them the opportunity to choose the type of complaint, supply any relevant account number, attach documents and provide relevant information.


Evidence Log
The DUA has also provided various new rights to the ICO. These include the power to summon staff as witnesses, to demand the presentation of documents and to mandate an organisation to pay for an external expert to investigate a complaint.
Anyone involved in this field of work will know how difficult it is to comply with these requirements, when all documents, evidence etc. is spread across different email accounts, social media etc. The DCMS provides an evidence log, that can simply be printed, that includes a timeline of events.
Compliance Close Season Sale
With the compliance date of the 19th of July 2026 having passed, it is understood how important it is for a system to be put in place, to allow compliance. Clubs that sign up before the start of the 2026/2027 season on a three-year contract get their first-year fee reduced, plus a complimentary two-hour training session.
Get further information


User Management
Drawing upon vast experience of the professional football environment, a suitable permission-based user management system has been developed. The system requires a designated IT Manager, and a designated DPO. Both roles are notified of the initial receipt of a complaint.
These positions have varying administrative powers, such as the creation of Departments, users etc. Dependent upon the size of a Club, numerous Departments and users can be created. When a complaint is received, it can be assigned to an appropriate Department/user to investigate.


Toolbox of Management Facilities
As well as managing complaints, the DCMS provides a wide range of software tools to help a DPO, or the person that has the DPO responsibility, to manage the complete compliance process.
These include specialist areas for the various documents and processes that must be completed, including ICO Case Management, Audit Records, Certification, DPIAs and DRAs. There is also a document vault. Certain of the sections, that are date sensitive, contain automatic notification of renewal facilities.


Update Function
This facility is available across the majority of the DCMS. It allows for updates to be made to a complaint or an investigation, which are entered directly into the Evidence Log, and which can, at the same time be emailed internally, or externally to the complainant.
The unique reference number that is allocated to each complaint, allows for staff and correspondents to email directly into the DCMS, simply by emailing the given mail server address, with the appropriate complaint number in the Subject title.


Guided Compliance
Whilst the responsibility for compliance relies upon each individual organisation, the system has suggested guided pathways through the compliance process. For example, upon receipt of a SAR, the first process is to verify the identity of the complainant, as can be seen in the above image.
The system then guides a user through the completion of the process, suggesting appropriate options, at each stage. At any time, a user can step outside of the suggestions, using the ‘Update’ tool, which can be emailed both internally and externally.
The threat of serious fines, which is real enough, are often used in advertising.
The reality of dealing with a complex SAR, Data Breach or general complaint, is that not only is there a risk of prosecution, but it can also take hundreds of man hours to resolve. Resolution can be very difficult, where dedicated staff are not involved and no system is in place.
The below graphic is indicative of the high level of fines that are levied for large scale breaches. However, don’t be fooled. In the past couple of months, fines of £355,000 for; allowing unauthorised access to PII, and £963,000 for failing to secure data have been levied against small to medium sized firms.
Maximum fine (or 4% annual worldwide turnover)
Questions & Answers
Pricing
Vinetree has worked with Clubs in all the top 5 Leagues and are very supportive of the ‘grass roots’ levels of football. Lower league Clubs have the same legal responsibilities as Premiership clubs, with the same laws applying.
The pricing structure is based upon a ‘reasonable use’ of the system, in relation to traffic, data storage and number of recorded complaints, based upon quarterly usage.
Compliance Close Season Sale
With the compliance date of the 19th of July 2026 having passed, it is understood how important it is for a system to be put in place, to allow compliance. Clubs that sign up before the start of the 2026/2027 season on a three-year contract get their first-year fee reduced, plus a complimentary two-hour training session.
Get further information
Lower Leagues
£250/quarter
National League
£500/quarter
League 2
£1000/quarter
League 1
£1250/quarter
Championship
£1500/quarter
Premiership
£2000/quarter